[PATCH 08/21] Mapped CCI-001157 to requirement_unclear.

Shawn Wells shawn at redhat.com
Tue Jul 3 23:37:34 UTC 2012


On 7/3/12 6:52 PM, Willy Santos wrote:
> CCI-001157 requires associating security attributes with information exchanged between information systems. This mapping is a request for input/discussion.
>
> Signed-off-by: Willy Santos <wsantos at redhat.com>
> ---
>   rhel6/src/input/auxiliary/srg_support.xml |    2 +-
>   1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
> index c0cac62..6261c13 100644
> --- a/rhel6/src/input/auxiliary/srg_support.xml
> +++ b/rhel6/src/input/auxiliary/srg_support.xml
> @@ -38,7 +38,7 @@ The requirement is impractical or out of scope.
>   <description>
>   It is unclear how to satisfy this requirement.
>   </description>
> -<ref disa="20,31,218,219,224,1097,1159,1125,1126,1140,1143,1149" />
> +<ref disa="20,31,218,219,224,1097,1159,1125,1126,1140,1143,1149,1157" />
>   </Group> <!-- end requirement_unclear -->
>   
>   <Group id="new_rule_needed">

SRG-OS-000177 	CCI-001157 	The operating system must associate security 
attributes with information exchanged between information systems. 	When 
data is exchanged between information systems, the security attributes 
associated with the data needs to be maintained. Security attributes are 
an abstraction representing the basic properties or characteristics of 
an entity with respect to safeguarding information; typically associated 
with internal data structures (e.g., records, buffers, files) within the 
operating system and used to enable the implementation of access control 
and flow control policies, reflect special dissemination, handling or 
distribution instructions, or support other aspects of the information 
security policy. Security attributes may be explicitly or implicitly 
associated with the information contained within the information system.



This can be accomplished with CIPSO or IPSec Labelling, but 
impractical_guidance for a general purpose security guide. We should 
re-address whenever we tackle CNSS 12-53 though.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://fedorahosted.org/pipermail/scap-security-guide/attachments/20120703/53f776fb/attachment.html>


More information about the scap-security-guide mailing list